This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer File: veQRRX4ny5i0rjD846ivXGcpUJs.cer (raw, json) Hash identifier: BccsR2zFp0a58QRU1ZUp5tPnVLbrqdV9x19nAuNXYKU= Subject key identifier: BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027695 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft caRepository: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 20 Nov 2025 12:57:46 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 103.174.84.0/23 IP: 2001:df7:be80::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161429 (0x27695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 20 12:57:46 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A912425E, serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f5:b0:86:b5:e8:b6:bc:86:37:a4:bb:e6:da: 1c:0d:c5:a5:5c:e1:04:c7:79:af:91:b4:24:5b:9e: 70:35:31:f3:d8:93:a3:52:ea:04:a5:ce:c2:78:85: 42:6b:d2:45:dc:65:45:97:58:ec:5b:ea:dd:ec:cd: 09:e5:bf:2a:2e:60:87:3e:31:8b:f8:fa:c5:51:ed: 2b:af:55:8c:3e:58:0d:72:58:a1:67:f9:3c:6a:74: cf:8b:e6:8c:8d:e8:bf:03:ca:a0:46:a0:85:22:90: 22:cb:c0:0d:0a:68:d1:76:ef:4e:bd:a3:f0:d3:84: e9:a9:10:3d:07:03:ee:ec:e7:4f:43:33:51:34:01: d7:0f:1c:fd:75:fb:22:0a:dc:70:65:ae:4f:47:88: 5c:36:9b:0e:0e:88:48:71:2f:97:7a:bb:5a:db:3d: 3f:00:7d:18:1c:f4:ba:74:51:db:2f:8e:1d:e1:85: fc:57:e0:ee:b3:b7:45:2a:15:16:79:c9:3f:15:f3: 01:58:7a:6c:7b:23:a5:fa:c0:a0:1a:5a:36:86:c3: 10:f4:d3:20:00:9a:bf:3b:a9:fb:f7:8d:c5:d3:4e: 85:75:65:a6:a8:1b:45:13:eb:64:f5:a9:c3:57:13: 2a:b3:53:b1:27:ae:2b:9c:4b:cd:64:bb:93:2f:25: 9f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.84.0/23 IPv6: 2001:df7:be80::/48 Signature Algorithm: sha256WithRSAEncryption b8:2e:3c:af:44:82:86:6e:a5:f0:ae:9f:ca:00:e6:70:77:b4: 3d:b9:5b:9f:be:70:bf:6e:15:8e:c5:7b:5d:de:e0:f8:c9:67: f5:4e:a2:c2:09:0f:f2:e7:e1:52:02:d8:34:bb:a6:0a:6d:5a: 75:87:a4:60:b7:f0:29:53:c2:ac:89:d2:c5:2f:c3:b9:db:55: 91:1a:32:40:03:bc:b9:41:1f:9b:ee:a8:94:3f:50:8f:ff:a6: 08:c4:a1:45:a1:05:0d:52:c4:b1:3e:bf:12:8a:0f:8f:34:d2: e9:6f:1b:82:fb:b5:fc:f5:36:98:ec:b0:2b:af:0d:b1:98:36: ce:a3:76:a3:b0:82:f0:eb:d3:03:57:4d:45:eb:39:4a:c3:10: af:09:b8:bc:51:5e:69:6c:15:6d:5a:15:78:ac:9f:c6:57:e0: 22:a0:25:20:e1:d1:3d:d7:84:6a:1f:40:83:cc:83:b0:43:03: 35:11:ce:ab:35:5b:f7:aa:3c:1e:a3:19:e6:e0:a7:1b:c8:48: 98:ea:9e:0b:95:9e:93:26:07:cd:44:58:18:8a:27:41:6f:e8: 72:4a:8d:41:33:9d:05:6a:14:20:67:88:ae:95:c3:1a:2a:d5: fa:af:2b:33:57:61:ff:6c:d6:0f:1c:8d:9c:cb:e9:f1:64:c4: 78:cd:06:2e -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgIDAnaVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMDEyNTc0NloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMjQyNUUxMTAvBgNVBAUTKEJERTQxMTQ1N0UyN0NCOThCNEFFMzBG Q0UzQThBRjVDNjcyOTUwOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC39bCGtei2vIY3pLvm2hwNxaVc4QTHea+RtCRbnnA1MfPYk6NS6gSlzsJ4hUJr 0kXcZUWXWOxb6t3szQnlvyouYIc+MYv4+sVR7SuvVYw+WA1yWKFn+TxqdM+L5oyN 6L8DyqBGoIUikCLLwA0KaNF27069o/DThOmpED0HA+7s509DM1E0AdcPHP11+yIK 3HBlrk9HiFw2mw4OiEhxL5d6u1rbPT8AfRgc9Lp0Udsvjh3hhfxX4O6zt0UqFRZ5 yT8V8wFYemx7I6X6wKAaWjaGwxD00yAAmr87qfv3jcXTToV1ZaaoG0UT62T1qcNX EyqzU7EnriucS81ku5MvJZ/fAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUveQRRX4n y5i0rjD846ivXGcpUJswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTI0MjVFLzYzNDA2OUYwNEM0NTExRUM4ODlBQjA4NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyNDI1RS82MzQwNjlGMDRDNDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0 bnk1aTByakQ4NDZpdlhHY3BVSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf MAwEAgABMAYDBAFnrlQwDwQCAAIwCQMHACABDfe+gDANBgkqhkiG9w0BAQsFAAOC AQEAuC48r0SChm6l8K6fygDmcHe0Pblbn75wv24VjsV7Xd7g+Mln9U6iwgkP8ufh UgLYNLumCm1adYekYLfwKVPCrInSxS/DudtVkRoyQAO8uUEfm+6olD9Qj/+mCMSh RaEFDVLEsT6/EooPjzTS6W8bgvu1/PU2mOywK68NsZg2zqN2o7CC8OvTA1dNRes5 SsMQrwm4vFFeaWwVbVoVeKyfxlfgIqAlIOHRPdeEah9Ag8yDsEMDNRHOqzVb96o8 HqMZ5uCnG8hImOqeC5WekyYHzURYGIonQW/ockqNQTOdBWoUIGeIrpXDGirV+q8r M1dh/2zWDxyNnMvp8WTEeM0GLg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:52 2025 by rpki-client